void __cdecl PushToConsole(char* szVal )
{
DWORD dwCShell = (DWORD)GetModuleHandleA("CShell.dll");
client = FindPattern(dwCShell, 0xc18000, (PBYTE)"\x8B\x15\x00\x00\x00\x00\x8B\x82\x00\x00\x00\x00\x68\x00\x00\x00\x00\xFF\xD0\x83\xC4\x04\x53\xE8\x00\x00\x00\x00\x8B\xC8", "xx????xx????x????xxxxxxx????xx");
if( dwCShell != NULL )
{
DWORD *LTClient = ( DWORD* )( (dwCShell + client) ); //0x299D40 NA //0x206370 RUS //0x262750 CN //0x?????? PH
void* CONoff = ( void* )*( DWORD* )( *LTClient + 0x1F8 );
_asm
{
push szVal;
call CONoff;
add esp, 4;
}
}
}

for(DWORD i = 0; i < 0x128000; i++ )
{
if ( (*(BYTE *)(Base+i+0x00))==0xC7
&& (*(BYTE *)(Base+i+0x01))==0x06
&& (*(BYTE *)(Base+i+0x06))==0x89
&& (*(BYTE *)(Base+i+0x07))==0x86
&& (*(BYTE *)(Base+i+0x0C))==0x89
&& (*(BYTE *)(Base+i+0x0D))==0x86 )
return (DWORD_PTR *)(Base + i + 2);
}


0x29CEE8